PT-2021-15667
CVE-2021-24117
·
تاريخ النشر
2021-07-14
·
تاريخ التحديث
2022-05-13
الوصف من
CVSS 3.1
4.9
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Apache Teaclave Rust SGX SDK version 1.1.3
Description:
A side-channel vulnerability in base64 PEM file decoding allows system-level attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.
Recommendations:
For Apache Teaclave Rust SGX SDK version 1.1.3, consider disabling the base64 PEM file decoding functionality until a patch is available to prevent potential exploitation. Restrict access to sensitive RSA keys to minimize the risk of information disclosure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾